BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

一个工程师打开 Cursor，让 Agent 帮他接入一个支付 API。Agent 发出了一个 HTTP 请求，拿到了文档页面，400 毫秒后做出了判断。但这份文档有将近 20 万个 Token，远远超出了 Agent 的上下文窗口容量。Agent ...

Multiple espionage-motivated threat actors have rapidly adopted a newly discovered exploit kit that chains Chrome browser and ...

A rapidly adopted exploit kit, dubbed BlueMoon, chains Chrome and Microsoft Windows zero-days to compromise targets in espionage-focused phishing campaigns.

Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

The definition of a high-quality, successful product is undergoing rapid evolution, as shifting consumer expectations, ...

GPT-6 Astra punta su computer use, coding e attività agentiche lunghe. Migliora memoria e uso degli strumenti, mentre le ...

Google has patched 230 vulnerabilities on Tuesday, including another actively exploited Chrome zero-day bug, the seventh such ...

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

Google has fixed 230 Chrome vulnerabilities, including an actively exploited V8 zero-day that can trigger heap corruption.

Google has fixed 230 vulnerabilities in Chrome, including a zero-day flaw, CVE-2026-87491, with an in-the-wild exploit.

Chrome 153 was released with patches for 230 vulnerabilities, including an exploited zero-day (CVE-2026-87491) in the V8 JavaScript engine.